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This listing of claims replaces all prior versions, and 
listings of claims in the instant application: 



Listing of Claims: 

1. (Original) A method for remote incremental program 
verification, said method comprising: 
| receiving content verified by at least one content 

provider, said at least one content provider including an 
applet provider, a device manufacturer, a device issuer and 
a trusted post-issuance installer, said content including at 
least one program unit, each program unit comprising an 
Application Programming Interface (API) definition file and 
an implementation, each API definition file defining items 
in its associated program unit that are made accessible to 
one or more other program units, each implementation 
including executable code corresponding to said API 
definition file, said executable code including type 
specific instructions and data, said verification including 
determining binary compatibility of earlier program unit 
implementations with later program unit implementations; 

installing said content on a resource-constrained 
device ; 

issuing said resource-constrained device to an end 
user; and 

allowing post-issuance installation of verified content 
on said resource-constrained device by said trusted post- 
issuance installer, said post-installation occurring after 
said issuance. 
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2. (Previously Presented) A method for remote 
incremental program verification, said method comprising: 

receiving content verified by at least one content 
provider, said at least one content provider including an 
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applet provider, a device manufacturer, a device issuer 
and a trusted post-issuance installer, said content 
including at least one program unit, each program unit 
comprising an Application Programming Interface (API) 
definition file and an implementation, each API 
definition file defining items in its associated program 
unit that are made accessible to one or more other 
program units, each implementation including executable 
code corresponding to said API definition file, said 
executable code including type specific instructions and 
data, said verification including determining binary 
compatibility of earlier program unit implementations 
with later program unit implementations, said 
verification further comprising: 

receiving a second version of said first 
program unit implementation and a second version 
of said first program unit API definition file, 
said second version being a revised version of 
said first version; 

verifying said second version of said first 
program unit implementation, including 

indicating a verification error when said 
second version of said first program unit 
implementation is not internally consistent; and 

indicating a verification error when said 
second version of said first program unit 
implementation is inconsistent with said second 
version of said first program unit API definition 
file; and 

verifying said second version of said first 
program unit implementation is binary compatible 
with said first version of said first program unit 
implementation, including indicating a 
verification error when said first version of said 
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first program unit API definition file is 
incompatible with said second version of said 
first program unit API definition file; 
installing said content on a resource-constrained 
device; 

issuing said resource-constrained device to an end 
user; and 

allowing post-issuance installation of verified 
content on said resource-constrained device by said 
trusted post-issuance installer, said post-installation 
occurring after said issuance. 

3. (Original) The method of claim 2, further comprising: 
indicating a verification error when a second program 

unit implementation that references said first program unit 
is inconsistent with said first version of said first 
program unit API definition file; and 

indicating said second program unit implementation is 
verified with said second version of said first program unit 
API definition file when said second version of said first 
program unit implementation is compatible with said first 
version of said first program unit implementation. 

4. (Original) The method of claim 3, further comprising: 
indicating said second program unit implementation is 

verified with said second version of said first program unit 
implementation when said second program unit implementation 
is verified with said second version of said first program 
unit API definition file. 
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5. (Original) The method of claim 2 wherein said first 
version of said first program unit API definition file is 
binary compatible with said second version of said first 
program unit API definition file when said second version of 
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said first program unit API definition file includes a superset 
of each element in said first version of said first program 
unit API definition file. 

6. (Original) The method of claim 2 wherein 

said trusted post-issuance installer verifies a new 
program unit; and 

said trusted post-issuance installer installs said 
verified new program unit on said resource-constrained 
device . 

7. (Original) The method of claim 6 wherein post- 
issuance verification is performed on a resource-rich device. 

8. (Original) The method of claim 6 wherein post- 
issuance verification is performed on a terminal device. 

9. (Original) The method of claim 6 wherein said 
verification is performed by the provider of said new program 
unit . 

10. (Original) The method of claim 6 wherein said 
verification is performed by said applet provider. 

11. (Original) The method of claim 6 wherein said 
verification is performed by said device manufacturer. 

12. (Original) The method of claim 6 wherein said 
verification is performed by said device issuer. 

13. (Original) The method of claim 6 wherein said 
verification is performed by said applet provider and said 
device manufacturer. 
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14. (Original) The method of claim 6 wherein said 
verification is performed by said applet provider and said 
device issuer. 

15. (Original) The method of claim 6 wherein said 
verification is performed by said device manufacturer and said 
device issuer. 

16. (Original) The method of claim 6 wherein said 
verification is performed by said applet provider, said device 
manufacturer and said device issuer. 

17. (Original) The method of claim 6 wherein said 
verification is performed by said applet provider, said device 
manufacturer, said device issuer and said trusted post-issuance 
installer. 

18. (Original) The method of claim 6 wherein said 
verification is performed by said device manufacturer, said 
device issuer and said trusted post-issuance installer. 

19. (Original) The method of claim 6 wherein said 
verification is performed by said device manufacturer and said 
trusted post-issuance installer. 

20. (Original) The method of claim 6 wherein said 
verification is performed by said device issuer and said 
trusted post-issuance installer. 

21. (Original) The method of claim 6 wherein post- 
issuance verification is performed on a resource-rich device. 
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22. (Original) The method of claim 6 wherein post- 
issuance verification is performed on a terminal device. 
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23. (Original) A method for remote incremental program 
verification, said method comprising: 

receiving content verified by at least one content 
provider, said at least one content provider including an 
applet provider, a device manufacturer, a device issuer and 
an untrusted post -issuance installer, said content including 
at least one program unit, each program unit comprising an 
Application Programming Interface (API) definition file and 
an implementation, each API definition file defining items 
in its associated program unit that are made accessible to 
one or more other program units, each implementation 
including executable code corresponding to said API 
definition file, said executable code including type 
specific instructions and data, said verification including 
determining binary compatibility of earlier program unit 
implementations with later program unit implementations; 

installing said content on a resource -constrained 
device ; 

issuing said resource-constrained device to an end 
user; and 

allowing post-issuance installation of verified content 
on said resource-constrained device by said untrusted post- 
issuance installer, said post-installation occurring after 
said issuance. 

24. (Previously Presented) A method for remote 
incremental program verification, said method comprising: 

receiving content verified by at least one content 
provider, said at least one content provider including an 
applet provider, a device manufacturer, a device issuer 
and an untrusted post -issuance installer, said content 
including at least one program unit, each program unit 
comprising an Application Programming Interface (API) 
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definition file and an implementation, each API 
definition file defining items in its associated program 
unit that are made accessible to one or more other 
program units, each implementation including executable 
code corresponding to said API definition file, said 
executable code including type specific instructions and 
data, said verification including determining binary 
compatibility of earlier program unit implementations 
with later program unit implementations, said 
verification further comprising: 

receiving a second version of said first 
program unit implementation and a second version 
of said first program unit API definition file, 
said second version being a revised version of 
said first version; and 

verifying said second version of said first 
program unit implementation, including 

determining whether said second version of 
said first program unit implementation is 
internally consistent; and 

determining whether said second version of 
said first program unit implementation is 
consistent with said second version of said first 
program unit API definition file; and 

verifying said second version of said first 
program unit implementation is binary compatible 
with said first version of said first program unit 
implementation by comparing said first version of 
said first program unit API definition file and 
said second version of said first program unit API 
definition file; 
installing said content on a resource-constrained 

device; 

issuing said resource-constrained device to an end 
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user; and 

allowing post- issuance installation of verified content 
on said resource -constrained device by said unt rusted post- 
issuance installer, said post-installation occurring after 
said issuance. 

25. (Original) The method of claim 24, further 
comprising : 

determining whether a second program unit 
implementation that references said first program unit is 
consistent with said first version of said first program 
unit API definition file; and 

indicating said second program unit implementation is 
verified with said second version of said first program unit 
API definition file when said second version of said first 
program unit implementation is compatible with said first 
version of said first program unit implementation. 

26. (Original) The method of claim 25, further 
comprising : 

indicating said second program unit implementation is 
verified with said second version of said first program unit 
implementation when said second program unit implementation 
is verified with said second version of said first program 
unit API definition file. 

27. (Original) The method of claim 24 wherein said first 
version of said first program unit API definition file is 
binary compatible with said second version of said first 
program unit API definition file when said second version of 
said first program unit API definition file includes a superset 
of each element in said first version of said first program 
unit API definition file. 
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28. (Original) The method of claim 24 wherein 

said untrusted post-issuance installer verifies a new 
program unit; and 

said untrusted post-issuance installer installs said 
verified new program unit on said resource-constrained 
device. 

29. (Original) The method of claim 24 wherein post- 
issuance verification is performed on a resource-rich device. 

30. (Original) The method of claim 24 wherein post- 
issuance verification is performed on a terminal device. 

31. (Original) The method of claim 24 wherein said 
verification is performed by the provider of said new program 
unit . 

32. (Original) The method of claim 24 wherein said 
verification is performed by said applet provider. 

33. (Original) The method of claim 24 wherein said 
verification is performed by said device manufacturer. 

34. (Original) The method of claim 24 wherein said 
verification is performed by said device issuer. 

35. (Original) The method of claim 24 wherein said 
verification is performed by said applet provider and said 
device manufacturer. 

36. (Original) The method of claim 24 wherein said 
verification is performed by said applet provider and said 
device issuer. 
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37. (Original) The method of claim 24 wherein said 
verification is performed by said device manufacturer and said 
device issuer. 

38. (Original) The method of claim 24 wherein said 
verification is performed by said applet provider, said device 
manufacturer and said device issuer. 

39. (Original) The method of claim 24 wherein said 
verification is performed by said applet provider, said device 
manufacturer, said device issuer and said untrusted post- 
issuance installer. 

40. (Original) The method of claim 24 wherein said 
verification is performed by said device manufacturer, said 
device issuer and said untrusted post-issuance installer. 

41. (Original) The method of claim 24 wherein said 
verification is performed by said device manufacturer and said 
untrusted post-issuance installer. 

42. (Original) The method of claim 24 wherein said 
verification is performed by said device issuer and said 
untrusted post-issuance installer. 

43. (Original) The method of claim 24 wherein post- 
issuance verification is performed on a resource-rich device. 

44. (Original) The method of claim 24 wherein post- 
issuance verification is performed on a terminal device. 
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45. (Original) A program storage device readable by a 
machine, embodying a program of instructions executable by the 
machine to perform program verification, comprising: 
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receiving content verified by at least one content 
provider, said at least one content provider including an 
applet provider, a device manufacturer, a device issuer and 
a trusted post-issuance installer, said content including at 
least one program unit, each program unit comprising an 
Application Programming Interface (API) definition file and 
an implementation, each API definition file defining items 
in its associated program unit that are made accessible to 
one or more other program units, each implementation 
including executable code corresponding to said API 
definition file, said executable code including type 
specific instructions and data, said verification including 
determining binary compatibility of earlier program unit 
implementations with later program unit implementations; 

installing said content on a resource-constrained 
device; 

issuing said resource -constrained device to an end 
user; and 

allowing post-issuance installation of verified content 
on said resource -constrained device by said trusted post- 
issuance installer, said post-installation occurring after 
said issuance . 
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46. (Previously Presented) A program storage device 
readable by a machine, embodying a program of instructions 
executable by the machine to perform program verification, 
comprising: 

receiving content verified by at least one content 
provider, said at least one content provider including an 
applet provider, a device manufacturer, a device issuer and 
a trusted post-issuance installer, said content including at 
least one program unit, each program unit comprising an 
Application Programming Interface (API) definition file and 
an implementation, each API definition file defining items 
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in its associated program unit that are made accessible to 
one or more other program units, each implementation 
including executable code corresponding to said API 
definition file, said executable code including type 
specific instructions and data, said verification including 
determining binary compatibility of earlier program unit 
implementations with later program unit implementations, 
said verification further comprising: 

receiving a second version of said first program 
unit implementation and a second version of said first 
program unit API definition file, said second version 
being a revised version of said first version; 

verifying said second version of said first program 
unit implementation, including 

indicating a verification error when said second 
version of said first program unit implementation is not 
internally consistent; and 

indicating a verification error when said second 
version of said first program unit implementation is 
inconsistent with said second version of said first 
program unit API definition file; and 

verifying said second version of said first program 
unit implementation is binary compatible with said first 
version of said first program unit implementation 
including indicating a verification error when said first 
version of said first program unit API definition file is 
incompatible with said second version of said first 
program unit API definition file; 

installing said content on a resource-constrained 
device; 

issuing said resource-constrained device to an end 
user; and 

allowing post- issuance installation of verified content 
on said resource-constrained device by said trusted post- 
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issuance installer, said post-installation occurring after 
said issuance. 

47. (Original) The program storage device of claim 46 , 
further comprising: 

indicating a verification error when a second program 
unit implementation that references said first program unit 
is inconsistent with said first version of said first 
program unit API definition file; and 

indicating said second program unit implementation is 
verified with said second version of said first program unit 
API definition file when said second version of said first 
program unit implementation is compatible with said first 
version of said first program unit implementation. 

48. (Original) The program storage device of claim 47, 
further comprising: 

indicating said second program unit implementation is 
verified with said second version of said first program unit 
implementation when said second program unit implementation 
is verified with said second version of said first program 
unit API definition file. 



49. (Original) The program storage device of claim 46 
wherein said first version of said first program unit API 
definition file is binary compatible with said second version 
of said first program unit API definition file when said second 
version of said first program unit API definition file includes 
a superset of each element in said first version of said first 
program unit API definition file. 
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50. (Original) The program storage device of claim 46 
wherein 

said trusted post-issuance installer verifies a new 
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program unit; and 

said trusted post-issuance installer installs said 
verified new program unit on said resource-constrained 
device . 



51. (Original) The program storage device of claim 50 
wherein post- issuance verification is performed on a resource- 
rich device. 



52. (Original) The program storage device of claim 50 
wherein post -issuance verification is performed on a terminal 
device . 



53. (Original) The program storage device of claim 50 
wherein said verification is performed by the provider of said 
new program unit . 
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54. (Original) A program storage device readable by a 
machine, embodying a program of instructions executable by the 
machine to perform program verification, comprising: 

receiving content verified by at least one content 
provider, said at least one content provider including an 
applet provider, a device manufacturer, a device issuer and 
an untrusted post-issuance installer, said content including 
at least one program unit, each program unit comprising an 
Application Programming Interface (API) definition file and 
an implementation, each API definition file defining items 
in its associated program unit that are made accessible to 
one or more other program units, each implementation 
including executable code corresponding to said API 
definition file, said executable code including type 
specific instructions and data, said verification including 
determining binary compatibility of earlier program unit 
implementations with later program unit implementations ; 
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installing said content on a resource-constrained 
device; 

issuing said resource-constrained device to an end 
user; and 

allowing post-issuance installation of verified content 
on said resource-constrained device by said untrusted post- 
issuance installer, said post-installation occurring after 
said issuance. 
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55. (Previously Presented) A program storage device 
readable by a machine, embodying a program of instructions 
executable by the machine to perform program verification, 
comprising : 

receiving content verified by at least one content 
provider, said at least one content provider including an 
applet provider, a device manufacturer, a device issuer and 
an untrusted post-issuance installer, said content including 
at least one program unit, each program unit comprising an 
Application Programming Interface (API) definition file and 
an implementation, each API definition file defining items 
in its associated program unit that are made accessible to 
one or more other program units, each implementation 
including executable code corresponding to said API 
definition file, said executable code including type 
specific instructions and data, said verification including 
determining binary compatibility of earlier program unit 
implementations with later program unit implementations, 
said verification further comprising: 

receiving a second version of said first program 
unit implementation and a second version of said first 
program unit API definition file, said second version 
being a revised version of said first version; and 

verifying said second version of said first program 
unit implementation, including 
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indicating a verification error when said second 
version of said first program unit implementation is not 
internally consistent; and 

indicating a verification error when said second 
version of said first program unit implementation is 
inconsistent with said second version of said first 
program unit API definition file; and 

verifying said second version of said first program 
unit implementation is binary compatible with said first 
version of said first program unit implementation 
including indicating a verification error when said first 
version of said first program unit API definition file is 
incompatible when said second version of said first 
program unit API definition file; 

installing said content on a resource -constrained 

device ; 

issuing said resource -constrained device to an end 
user; and 

allowing post-issuance installation of verified content 
on said resource-constrained device by said untrusted post- 
issuance installer, said post-installation occurring after 
said issuance. 
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56. (Original) The program storage device of claim 55, 

further comprising: 

indicating a verification error when a second program 
unit implementation that references said first program unit 
is inconsistent with said first version of said first 
program unit API definition file; and 

indicating said second program unit implementation is 
verified with said second version of said first program unit 
API definition file when said second version of said first 
program unit implementation is compatible with said first 
version of said first program unit implementation. 
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57. (Original) The program storage device of claim 56, 

further comprising: 

indicating said second program unit implementation is 
verified with said second version of said first program unit 
implementation when said second program unit implementation 
is verified with said second version of said first program 
unit API definition file. 

58. (Original) The program storage device of claim 55 
wherein said first version of said first program unit API 
definition file is binary compatible with said second version 
of said first program unit API definition file when said second 
version of said first program unit API definition file includes 
a superset of each element in said first version of said first 
program unit API definition file. 

59. (Original) The program storage device of claim 55 
wherein 

said untrusted post-issuance installer verifies a new 

program unit; and 

said untrusted post-issuance installer installs said 
verified new program unit on said resource -constrained 
device . 

60. (Original) The program storage device of claim 55 
wherein post-issuance verification is performed on a resource- 
rich device. 

61. (Original) The program storage device of claim 55 
wherein post-issuance verification is performed on a terminal 
device . 

62. (Original) The program storage device of claim 55 
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wherein said verification is performed by the provider of said 
new program unit . 

63. (Original) A system for executing a software 
application, the system comprising: 

a computing system that generates executable code, 
comprising means for receiving content verified by at least 
one content provider, said at least one content provider 
including an applet provider, a device manufacturer, a 
device issuer and a trusted post-issuance installer, said 
content including at least one program unit, each program 
unit comprising an Application Programming Interface (API) 
definition file and an implementation, each API definition 
file defining items in its associated program unit that are 
made accessible to one or more other program units, each 
implementation including executable code corresponding to 
said API definition file, said executable code including 
type specific instructions and data, said verification 
including determining binary compatibility of earlier 
program unit implementations with later program unit 
implementations ; 

means for installing said content on a resource - 
constrained device; 

means for issuing said resource-constrained device to 

an end user; and 

means for allowing post-issuance installation of 
verified content on said resource-constrained device by said 
trusted post-issuance installer, said post-installation 
occurring after said issuance. 

64. (Previously Presented) A system for executing a 
software application, the system comprising: 

a computing system that generates executable code, 
comprising means for receiving content verified by at least 
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one content provider, said at least one content provider 
including an applet provider, a device manufacturer, a 
device issuer and a trusted post-issuance installer, said 
content including at least one program unit, each program 
unit comprising an Application Programming Interface (API) 
definition file and an implementation, each API definition 
file defining items in its associated program unit that are 
made accessible to one or more other program units, each 
implementation including executable code corresponding to 
said API definition file, said executable code including 
type specific instructions and data, said verification 
including determining binary compatibility of earlier 
program unit implementations with later program unit 
implementations, said computing system further comprising: 
means for receiving a second version of said first 
program unit implementation and a second version of said 
first program unit API definition file, said second 
version being a revised version of said first version; 

means for verifying said second version of said 
first program unit implementation, including 

means for indicating a verification error when said 
second version of said first program unit implementation 
is not internally consistent; and 

means for indicating a verification error when said 
second version of said first program unit implementation 
is inconsistent with said second version of said first 
program unit API definition file; and 

means for verifying said second version of said 
first program unit implementation is binary compatible 
with said first version of said first program unit 
implementation including indicating a verification error 
when said first version of said first program unit API 
definition file is incompatible with said second version 
of said first program unit API definition file; 
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means for installing said content on a resource- 
constrained device; 

means for issuing said resource-constrained device to 
an end user; and 

means for allowing post-issuance installation of 
verified content on said resource-constrained device by said 
trusted post-issuance installer, said post-installation 
occurring after said issuance. 

65. (Original) The system of claim 64, further 
comprising : 

means for indicating a verification error when a second 
program unit implementation that references said first 
program unit is inconsistent with said first version of said 
first program unit API definition file; and 

means for indicating said second program unit 
implementation is verified with said second version of said 
first program unit API definition file when said second 
version of said first program unit implementation is 
compatible with said first version of said first program 
unit implementation. 

66. (Original) The system of claim 65, further 
comprising : 

means for indicating said second program unit 
implementation is verified with said second version of said 
first program unit implementation when said second program 
unit implementation is verified with said second version of 
said first program unit API definition file. 
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67. (Original) The system of claim 64 wherein said first 
version of said first program unit API definition file is 
binary compatible with said second version of said first 
program unit API definition file when said second version of 
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said first program unit API definition file includes a superset 
of each element in said first version of said first program 
unit API definition file. 

68. (Original) The system of claim 64 wherein 

said trusted post-issuance installer verifies a new 
program unit; and 

said trusted post-issuance installer installs said 
verified new program unit on said resource -constrained 
device . 

69. (Original) The system of claim 68 wherein post- 
issuance verification is performed on a resource-rich device. 

70. (Original) The system of claim 68 wherein post- 
issuance verification is performed on a terminal device. 

71. (Original) The system of claim 68 wherein said 
verification is performed by the provider of said new program 
unit . 
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72. (Original) The system of claim 68 wherein said 
verification is performed by said applet provider. 

73. (Original) A system for executing a software 
application, the system comprising: 

a computing system that generates executable code, 
comprising means for receiving content verified by at least 
one content provider, said at least one content provider 
including an applet provider, a device manufacturer, a 
device issuer and an untrusted post -issuance installer, said 
content including at least one program unit, each program 
unit comprising an Application Programming Interface (API) 
definition file and an implementation, each API definition 
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file defining items in its associated program unit that are 
made accessible to one or more other program units, each 
implementation including executable code corresponding to 
said API definition file, said executable code including 
type specific instructions and data, said verification 
including determining binary compatibility of earlier 
program unit implementations with later program unit 
implementations ; 

means for installing said content on a resource- 
constrained device; 

means for issuing said resource -constrained device to 
an end user; and 

means for allowing post-issuance installation of 
verified content on said resource-constrained device by said 
untrusted post-issuance installer, said post-installation 
occurring after said issuance. 
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74. (Previously Presented) A system for executing a 
software application, the system comprising: 

a computing system that generates executable code, 
comprising means for receiving content verified by at least 
one content provider, said at least one content provider 
including an applet provider, a device manufacturer, a 
device issuer and an untrusted post -issuance installer, said 
content including at least one program unit, each program 
unit comprising an Application Programming Interface (API) 
definition file and an implementation, each API definition 
file defining items in its associated program unit that are 
made accessible to one or more other program units, each 
implementation including executable code corresponding to 
said API definition file, said executable code including 
type specific instructions and data, said verification 
including determining binary compatibility of earlier 
program unit implementations with later program unit 
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implementations, said computing system further comprising: 
means for receiving a second version of said first 
program unit implementation and a second version of said 
first program unit API definition file, said second 
version being a revised version of said first version; 

means for verifying said second version of said 
first program unit implementation, including 

means for indicating a verification error when said 
second version of said first program unit implementation 
is not internally consistent; and 

means for indicating a verification error when said 
second version of said first program unit implementation 
is inconsistent with said second version of said first 
program unit API definition file; and 

means for verifying said second version of said 
first program unit implementation is binary compatible 
with said first version of said first program unit 
implementation including indicating a verification error 
when said first version of said first program unit API 
definition file is incompatible with said second version 
of said first program unit API definition file; 
means for installing said content on a resource- 
constrained device; 

means for issuing said resource-constrained device to 
an end user; and 

means for allowing post- issuance installation of 
verified content on said resource-constrained device by said 
untrusted post-issuance installer, said post-installation 
occurring after said issuance. 
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75. (Original) The system of claim 74, further 
comprising : 

means for indicating a verification error when a second 
program unit implementation that references said first 



Page 24 of 29 



Appl. No. 09/661,582 

Notice dated October 26, 2004 

Reply to Notice of Non-Compliant Amendment of September 27, 2004 



program unit is inconsistent with said first version of said 
first program unit API definition file; and 

means for indicating said second program unit 
implementation is verified with said second 



version of said first program unit API definition file 
when said second version of said first program unit 
implementation is compatible with said first version of said 
first program unit implementation. 

76. (Original) The system of claim 75, further 
comprising : 

means for indicating said second program unit 
implementation is verified with said second version of said 
first program unit implementation when said second program 
unit implementation is verified with said second version of 
said first program unit API definition file. 



77. (Original) The system of claim 74 wherein said first 
version of said first program unit API definition file is 
binary compatible with said second version of said first 
program unit API definition file when said second version of 
said first program unit API definition file includes a superset 
of each element in said first version of said first program 
unit API definition file. 
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78. (Original) The system of claim 74 wherein 

said untrusted post-issuance installer verifies a new 

program unit; and 

said untrusted post-issuance installer installs said 

verified new program unit on said resource-constrained 

device . 
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79. (Original) The system of claim 74 wherein post- 
issuance verification is performed on a resource-rich device. 

80. (Original) The system of claim 74 wherein post- 
issuance verification is performed on a terminal device. 

81. (Original) The system of claim 78 wherein said 
verification is performed by the provider of said new program 
unit . 
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82. (Original) A resource -constrained device, 
comprising : 

memory for providing content verified by at least one 
content provider, said at least one content provider 
including an applet provider, a device manufacturer, a 
device issuer and a trusted post-issuance installer, said 
content including at least one program unit, each program 
unit comprising an Application Programming Interface (API) 
definition file and an implementation, each API definition 
file defining items in its associated program unit that are 
made accessible to one or more other program units, each 
implementation including executable code corresponding to 
said API definition file, said executable code including 
type specific instructions and data, said verification 
including determining binary compatibility of earlier 
program unit implementations with later program unit 
implementations ; 

an installer device for installation of said content on 
said resource-constrained device, said installation 
including installation of initial content and installation 
of additional content by said trusted post-issuance 
installer after said resource-constrained device is issued 
to an end user; and 

a virtual machine that is capable of executing 
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instructions included within said content. 

83. (Original) The resource-constrained device of claim 
82 wherein said resource-constrained device comprises a smart 
card. 

84. (Cancelled) 



GUNNISON. Me KAY & 

HODGSON, L.L.P. 
Garden West Office Plaza 
1 900 Garden Road. Suite 220 
Monterey, CA 93940 

(831)655-0880 
Fax (831)655-0888 



85. (Original) A resource-constrained device, 
comprising : 

memory for providing content verified by at least one 
content provider, said at least one content provider 
including an applet provider, a device manufacturer, a 
device issuer and an untrusted post-issuance installer, said 
content including at least one program unit, each program 
unit comprising an Application Programming Interface (API) 
definition file and an implementation, each API definition 
file defining items in its associated program unit that are 
made accessible to one or more other program units, each 
implementation including executable code corresponding to 
said API definition file, said executable code including 
type specific instructions and data, said verification 
including determining binary compatibility of earlier 
program unit implementations with later program unit 
implementations ; 

an installer device for installation of said content on 
said resource-constrained device, said installation 
including installation of initial content and installation 
of additional content by said untrusted post -issuance 
installer after said resource -constrained device is issued 
to an end user; and 

a virtual machine that is capable of executing 
instructions included within said content. 
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86. (Original) The resource-constrained device of claim 
85 wherein said resource-constrained device comprises a smart 
card. 

87. (Cancelled) 
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